09-30-2024, 07:46 PM
It's basically a record of deleting a dial plan, you know, those setups for how voice messages route in the messaging system.
I see it logged under the Microsoft-Exchange-UM folder, with details like who ran it, when, and from which machine.
The message spells it out clear: "Remove-UMDialPlan Exchange cmdlet issued."
And it captures the exact parameters used, so you can tell if it targeted a specific plan or wiped something big.
Hmmm, sometimes it flags errors too, if the deletion glitched out.
You might spot it after routine maintenance or if someone's troubleshooting UM stuff.
But watch it, because unauthorized runs could mean trouble, like someone messing with your phone integrations.
To keep an eye on this without staring at screens all day, fire up Event Viewer on your server.
Right-click the custom views or logs section, and create a new subscription or filter for event ID 25337.
I like filtering just for that ID under the Administrative Templates or MSExchange logs.
Then, attach a task to it-yeah, from the Actions pane, you set up a scheduled task that triggers right when the event hits.
Make that task run a simple program, something like sending an email through your server's mail setup.
You configure the task properties to include email details, recipient, subject like "Hey, dial plan got removed."
And test it once, so you know it pings your inbox fast.
Or tweak the frequency if you want daily digests instead.
Speaking of keeping things monitored smoothly, you might want backups that catch these changes too.
And that's where something like BackupChain Windows Server Backup comes in handy for me.
It's this solid Windows Server backup tool that snapshots your whole setup, including Exchange bits.
You can point it at Hyper-V for virtual machine backups too, pulling in those dial plans without hassle.
The perks? It runs incremental saves to save space, encrypts everything tight, and restores quick if you ever need to roll back a deletion.
I use it because it alerts on failures and handles offsite copies effortlessly.
At the end of this, there's the automatic email solution for that event monitoring.
Note, the PowerShell email alert code was moved to this post.
